PraiseBeKEK | 3 points | Nov 17 2016 22:21:56

Heading to work.

Look at the debugger of and try to do what they mention in the mozilla. I am pretty sure you can view their conversations in while looking at debug. http://www.lhohq.info/container/pizza.html?q=Database+active+research+projects+funded+by+nih+nsf+sbir+usda+and+mrc-uk&section=Undernet+feedback%2C+comments+and+ideas.&Go.x=0&Go.y=0

permalink

beest1 | 3 points | Nov 18 2016 02:20:22

You touched on something important here. I believe this page is setup to take advantage of the page you mentioned http://phonograph.lhohq.info/addentry.php. This page utilizes a service/script called 'chipmunk guestbook'. If you post something here, it will add an entry to this page http://phonograph.lhohq.info/.

Chipmunk Guestbook is pretty vulnerable to SQL injection (See CVE site here) . From the CVE site:

Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to be displayed, such as a URL that contains a single quote (') in the start parameter of index.php.

You can even see botched attempts on the entry page http://phonograph.lhohq.info/. If you look at the top of the page you'll see

Warning: session_start() [function.session-start]: open(/home/content/71/9972971/tmp/sess_uvr85q9rrtftm7gtfpt5r9ifp0, O_RDWR) failed: No such file or directory (2) in /home/content/71/9972971/html/lhohq_subdomains/phonograph/index.php on line 2

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/content/71/9972971/html/lhohq_subdomains/phonograph/index.php:2) in /home/content/71/9972971/html/lhohq_subdomains/phonograph/index.php on line 2

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/content/71/9972971/html/lhohq_subdomains/phonograph/index.php:2) in /home/content/71/9972971/html/lhohq_subdomains/phonograph/index.php on line 2

My Theory is that this site is used as a hub of some sort to upload intentionally shitty web pages via SQL injection. The info is probably real (until 4chan figures out the SQL injection). It's used as an untraceable source so it can't be taken down like pastebin, github etc.

It's a very basic site, no JavaScript or jQuery. Just an apache server for PHP. Here's the builtwith page https://builtwith.com/lhohq.info.

Lastly, if you go to this page http://www.lhohq.info/container/sudanese-error-strike-africom/libor-swift-gchq-parliament-echelon-five-eyes-xkeyscore-query.html, There is a statement from anonymous or some such organization. Just view source or inspect the nodes to see it. Here's the pastebin link. I couldn't figure out the pastebin embed. http://pastebin.com/raw/x68k2UfV

*edit: This story broke in 2012 https://nakedsecurity.sophos.com/2012/09/04/apple-device-id-hack/

There's a statement in there about data:

Disclaimer: We like beer and the use of manipulated bacterial ADN to transmit encrypted data.

If you google that you get a few results: This one is most interesting https://twitter.com/ovnicraft/status/242968239414603776 but I don't have any more time right now. I'll pick this up later.

permalink

Download links:

http://freakshare.com/files/6gw0653b/Rxdzz.txt.html
http://u32.extabit.com/go/28du69vxbo4ix/?upld=1
http://d01.megashares.com/dl/22GofmH/Rxdzz.txt
http://minus.com/l3Q9eDctVSXW3
https://minus.com/mFEx56uOa
http://uploadany.com/?d=50452CCA1
http://www.ziddu.com/download/20266246/Rxdzz.txt.html
http://www.sendmyway.com/2bmtivv6vhub/Rxdzz.txt.html

HOW TO GET THE CANDY ONCE YOU HAVE DOWNLOADED THE FILE

first check the file MD5:
e7d0984f7bb632ee19d8dda1337e9fba

(lol yes, a "1337" there for the lulz, God is in the detail)

then decrypt the file using openssl:
openssl aes-256-cbc -d -a -in file.txt -out decryptedfile.tar.gz

password is:
antis3cs5clockTea#579d8c28d34af73fea4354f5386a06a6

then uncompress:
tar -xvzf decryptedfile.tar.gz

and then check file integrity using the MD5 included in the password u used to
decrypt before:
579d8c28d34af73fea4354f5386a06a6
^ yeah that one.

if everything looks fine
then perhaps it is.

enjoy it!

PraiseBeKEK | 1 points | Nov 17 2016 23:43:36

List of all emails/phone numbers http://pastebin.com/BDXPW4nB Is this just the list guccifer leaked?

permalink

Mad_Spoon | 1 points | Nov 18 2016 00:08:29

The Internet.

permalink

PatrioticDeplo | 3 points | Nov 17 2016 17:24:26

Sorry guys, this is about as far as I can go. I don't know shit about this, I just follow leads and connect dots for everyone. I started clicking through the site and following links, etc., but it's getting too deep for me.

We need an FBIPede to get through this.

permalink

PatrioticDeplo | 2 points | Nov 17 2016 18:50:59

Keep digging. There are MORE pages with MORE emails/phones/coordinates/etc in the site. All pictures are links, there are 250+ pages in this website so far.

permalink

PatrioticDeplo | 2 points | Nov 17 2016 18:51:42

Also, please relay the comments to the master thread.

https://www.reddit.com/r/pizzagate/comments/5dfiek/master_thread_pizzagate_needs_to_delve_more/

permalink

PatrioticDeplo | 1 points | Nov 17 2016 21:04:44

Very plausible. She could very well have something to do with this.

permalink

PatrioticDeplo | 3 points | Nov 17 2016 17:43:17

The rest of the website bears an uncanny resemblance to many others we've come across in this journey, including ping pong related, heavy breathing, etc. The music, website style, etc.

This is not an art project.

permalink

PatrioticDeplo | 1 points | Nov 17 2016 20:55:46

The algorithm needed to participate regularly in the annual reports or sec filings of the server through the proxy for the gamespy irc protocol data in the form of an origin server or proxy, received an invalid length is not allowed for the linux, ms windows for best of both operating system is that objects which have general applicability for both global email exclusion and inclusions.

For example, even if the status code 404 (not found) can be used to update this library separately.

Pop3 rule sets to process, create an unlimited amount of the parameter name. To add a news group just click on the internet mail server resources. Undeliverable file entries.Pluck.com is open then you probably have a= tolstytigr.fvwm-whateverfile in youre home directory, otherwise use the kill file, instantaneously send the file.1.1 The garbage collector itself) cannot be created on the advanced tab is used in the servers'list of the future. Remembers where you set on the option. Socks is a master server to a news event is sought, searching only in the smtp service for our bulk email software below:   However, the mozilla folks were able to effectively educate their constituency, and the user that a file of the entries in this case, http services (proxy/ httpd) should answer with corresponding http messages - "bad request" (400). Below is the amount of the numeric status codes are applicable to that site otherwise a connection for all kinds of negotiation are orthogonal and thus may be 1 or y cc clients and server are also not limited to : - thumbnail view allows multiple computers to be listed, separated by white space. Then you can hear audible static on a tcp connection to the no proxy for pref. Emeritus members must have made or your favourite terminal, ssh-add it'll ask you for the calculation of the generated public key (died.ssh/tioga.pub) to the "authorized_keys" file on the external network.   To do that, you can also removed ghosts , entries in the file or via pipe to external file. Version 0.3 version is available to the previous post example, the only unsafe characteristic of message-bodies is the cumulative total amount of space freed by a content-type field if they are called, are usually partial in both race driver 1.20 bad-words enabler 0.1. A small program which searches w95-98 windows' registry for entries that contain user names along with the list of all of you may see one of the matching. Use multiple copies of that file will be deleted from a variety of economic data available online servers added to any drive in half both at home i have a fiber-optic lan to lie in one of the program will randomly use them.

What does this mean?

permalink

ETEl2NAL407 | 1 points | Nov 19 2016 00:22:15

It's an older MS program, apparently for conducting computer searches and then securely storing all the information. Like an easy way to make a fast data dump. Many of the images and the text was taken directly from http://cipha.net/special/cofee_user_guide_v112.pdf

permalink

PatrioticDeplo | 1 points | Nov 18 2016 23:23:28

There are hundreds of articles like this. They mostly focus on Iraqi/Afghan wars, extraordinary renditions, aliens, smuggling, etc. This person was deep into government fuckery. I wonder if they stumbled upon the pedo ring and were stopped...

permalink

PatrioticDeplo | 1 points | Nov 18 2016 23:25:09

Someone was talking about that last night. Many many many of the pictures are originals, which raises even more questions.

It seems like most of the suspected pedo folks are working with kids, charities, humanitarian stuff for a cover. It's just like the Clinton campaign was run. Make yourself look good and accuse your opponent of everything you do.

permalink

PatrioticDeplo | 1 points | Nov 18 2016 23:29:51

If you go to LHOHQ.info and click contact, you come to the page that posts messages. http://phonograph.lhohq.info/ is where, if you have broken in, you can post messages.

If you check the dates and contents of the messages, people have known about this site for years and messed around with it. The site has existed in it's current form since at least 2007 and updated regularly since then. The style of the site and most of it's contents suggest it was created much earlier than 2007. The site resembles many sites that were unearthed from links in LHOHQ, most from the 90's. We've suggested amongst each other that the designer of many of the other sites is the same designer as this, and possibly the same designer as such sites as Drpong.net, cometpizza, etc. Definitely not a troll, per se.

Still an unknown creator, but links have been made to Milwaukee via posts in the early 2000's that talk about an "ancient Egyptian cobra" symbol with the letters LHOHQ that was found at 330 Kilburn in Milwaukee. The building is Tishman Speyer, Tishman was the builder of 666 5th ave, 1 World Trade Center, some Disney buildings, to name a few. About as satanic as you can get IMO.

Has yet to be determined a troll.

permalink

PatrioticDeplo | 3 points | Nov 17 2016 18:04:50

Interesting. All of the places to go and she found this place.

What if it's created by her alternate personality or something? It seems everyone involved with this, especially the women, seem to have alternate personalities that were abused.

permalink

PatrioticDeplo | 3 points | Nov 17 2016 18:18:50

Can you tell me anything about this? I googled LHOHQ and this showed up.

goo.gl/maps/Lhohq A description for this result is not available because of this site's robots.txt Learn more

So I clicked the link and it showed this. https://www.google.com/maps/place/263+Farm+and+Wilderness+Rd,+Plymouth,+VT+05056/@43.573544,-72.7603976,664m/data=!3m2!1e3!4b1!4m5!3m4!1s0x89e02c55744aeab9:0x68b9343b315cde0c!8m2!3d43.573544!4d-72.7582089?hl=en

It shows a wilderness farm FOR YOUNG BOYS. http://www.dailymotion.com/video/x10860_timberlake_people?GK_FACEBOOK_OG_HTML5=1

Timberlake

Every Boy's Dream. A camp for 80 boys, ages 9-14, founded in 1939, Timberlake focuses on adventure and skill-building in a supportive community.

263 Farm and Wilderness Road Plymouth, VT 05056 USA (802) 422-3761 | fandw@fandw.org http://www.fandw.org/ Copyright © 2005, Farm & Wilderness Foundation, Inc.

permalink

DangerElk | 2 points | Nov 17 2016 18:13:42

I'm not following the logic here. The registrar of both ihohq.info and Marina Abramovic's website are Wild West Domains (one of the worlds biggest registrars) therefore Abramovic operates ihohq.info?

permalink

anon_pizzagate | 1 points | Nov 17 2016 18:49:18

Both links show proxy domain registration info. These domains have zero relationship. You are either ignorant of domain registration or trying to confuse people.

permalink

PatrioticDeplo | 4 points | Nov 17 2016 18:03:16

http://superbad.com/

This is webart. That is not webart.

permalink